Issue #7117 has been updated by Jacob Helwig.

Status changed from Accepted to Available In Testing Branch

Fixed this further upstream by making sure that the environment that makes its 
way down to `Puppet::Network::Rights::Right#allowed?` is going to be a 
`Puppet::Node::Environment`, instead of just a string, since the `@environment` 
array will contain `Puppet::Node::Environment` objects instead of strings.

Merged the fix into `2.7.x` in commit:fded269b8b2487184f7cfc409c3e82daa59f595a
----------------------------------------
Bug #7117: 2.7.0rc1 broke the environment criteria in auth.conf
https://projects.puppetlabs.com/issues/7117

Author: Nick Fagerlund
Status: Available In Testing Branch
Priority: Urgent
Assignee: 
Category: API
Target version: 
Affected Puppet version: 2.7.0rc1
Keywords: 
Branch: 


Auth.conf has four criteria for determining an ACL match: path, method, 
authentication, and environment. Somewhere between 2.6.7 and Statler rc1, 
environment stopped working. 

To reproduce: on a puppet master running from source, make an auth.conf file 
like this: 

    path /
    environment override
    auth any
    allow *

On 2.6.7, this will allow the puppet master to behave normally in the 
production environment, but lets you test the REST API at will if you ask for 
the override environment. On 2.7.0rc1, the ACL is ignored completely. 


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en.

Reply via email to